Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa
File:                     323830343a376133303a3a2f34372d3437203d3e20323731333533.roa (raw, json)
Hash identifier:          nxvD0xTc1Cp5QFBCH1uxhYR3fPK3UzdgG3qyhQpSzzg=
Subject key identifier:   DD:C0:5C:30:AA:E9:07:B3:70:CC:C1:F3:E3:D0:DD:67:17:60:51:1F
Certificate issuer:       /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial:       75D72595A02C883A64EB5A07A2C22E19B58447E2
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa
Signing time:             Wed 17 Jul 2024 19:34:46 +0000
ROA not before:           Wed 17 Jul 2024 19:29:46 +0000
ROA not after:            Wed 16 Jul 2025 19:34:46 +0000
asID:                     271353
IP address blocks:        2804:7a30::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d7:25:95:a0:2c:88:3a:64:eb:5a:07:a2:c2:2e:19:b5:84:47:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Validity
            Not Before: Jul 17 19:29:46 2024 GMT
            Not After : Jul 16 19:34:46 2025 GMT
        Subject: CN=DDC05C30AAE907B370CCC1F3E3D0DD671760511F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:49:76:76:cd:e3:4d:e5:9c:ea:94:e4:c0:
                    fa:f9:e4:45:3d:19:45:8f:3c:24:a6:60:e1:53:c3:
                    9f:b5:94:6f:4e:b1:7b:76:4f:4c:e0:2b:1d:89:c2:
                    e4:99:fb:4f:0f:b4:06:c3:5b:3f:85:07:d5:ec:2f:
                    73:0c:ba:bc:b4:59:cb:76:e9:a1:28:fb:d0:a7:62:
                    3d:15:a0:c7:b7:0a:25:71:08:6a:7d:26:27:63:b2:
                    02:9a:41:33:8a:ff:8e:37:99:32:7c:bc:0e:88:9c:
                    75:85:c1:e1:b3:cb:4b:06:c0:6c:dc:80:bd:c6:ab:
                    f9:f4:f8:6b:2a:ff:2d:48:1d:7d:9c:c4:e3:45:33:
                    4a:aa:5e:f5:33:ea:d1:c3:b6:d3:14:b9:cc:eb:8d:
                    87:5c:10:65:bf:f6:ce:49:33:0c:af:01:8f:95:63:
                    12:1f:43:ce:69:35:06:23:7d:cc:9d:ec:10:f0:05:
                    19:9a:a4:f4:09:0d:86:86:d0:5d:dd:7c:49:1a:81:
                    d3:96:53:0b:b4:cc:5e:9e:fc:db:e0:83:14:d7:4b:
                    f8:23:c3:ca:be:d2:9f:b2:b2:10:eb:fd:4d:2f:7a:
                    2a:93:c9:05:b0:b6:f6:2a:db:7f:1e:6d:82:ef:b4:
                    4a:10:1c:6b:3b:c7:7c:92:a0:c2:4e:d1:08:02:ea:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C0:5C:30:AA:E9:07:B3:70:CC:C1:F3:E3:D0:DD:67:17:60:51:1F
            X509v3 Authority Key Identifier:
                keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/47

    Signature Algorithm: sha256WithRSAEncryption
         d6:54:ed:24:94:7c:35:06:36:13:25:ac:d8:0a:4b:a1:0d:ff:
         66:4d:0a:58:f7:2d:4e:65:a9:a4:17:3c:8c:28:54:74:5d:bb:
         8d:b4:46:57:a8:16:44:bd:26:12:e5:6c:f0:13:cf:bd:ab:12:
         ab:85:8c:d2:30:0c:dc:1c:b1:88:c2:ad:4a:4c:1c:74:fe:af:
         c2:11:19:69:68:24:dc:b1:63:fa:9d:66:06:00:5c:92:5c:2b:
         2c:4c:56:e9:06:f7:c4:2c:fa:6d:03:13:68:8b:5b:8a:5d:4d:
         98:e7:10:1c:3e:91:73:d6:30:79:78:6c:a3:37:50:05:06:8f:
         3b:3c:b0:3d:ad:74:c6:f0:79:09:71:08:fe:91:0e:95:bc:d5:
         5f:6c:26:49:53:7a:00:81:d7:26:c9:f5:ce:a8:19:0e:87:fd:
         ee:90:cd:88:d4:17:ed:8c:72:e3:a8:9c:bb:2b:53:15:81:cf:
         f0:60:e1:3f:cf:dd:1e:a9:52:22:99:c9:27:f7:00:7a:1e:aa:
         09:dd:40:41:a7:62:63:7a:c6:11:c3:8b:2a:a0:b0:74:2f:c3:
         73:5c:c8:31:1b:d3:ae:5f:46:4e:13:49:b4:05:ce:6a:3f:c4:
         9f:f3:df:66:12:c3:07:16:e3:3f:2e:5a:08:3d:e0:8a:c2:72:
         76:2b:2a:a5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUddcllaAsiDpk61oHosIuGbWER+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlEQkFENUZFQ0NEMzMyMzUxNjIzMDBBQTA1NzM4NzZF
OTc3MTE3NTAeFw0yNDA3MTcxOTI5NDZaFw0yNTA3MTYxOTM0NDZaMDMxMTAvBgNV
BAMTKEREQzA1QzMwQUFFOTA3QjM3MENDQzFGM0UzRDBERDY3MTc2MDUxMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXAUl2ds3jTeWc6pTkwPr55EU9
GUWPPCSmYOFTw5+1lG9OsXt2T0zgKx2JwuSZ+08PtAbDWz+FB9XsL3MMury0Wct2
6aEo+9CnYj0VoMe3CiVxCGp9JidjsgKaQTOK/443mTJ8vA6InHWFweGzy0sGwGzc
gL3Gq/n0+Gsq/y1IHX2cxONFM0qqXvUz6tHDttMUuczrjYdcEGW/9s5JMwyvAY+V
YxIfQ85pNQYjfcyd7BDwBRmapPQJDYaG0F3dfEkagdOWUwu0zF6e/NvggxTXS/gj
w8q+0p+yshDr/U0veiqTyQWwtvYq238ebYLvtEoQHGs7x3ySoMJO0QgC6r7ZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU3cBcMKrpB7NwzMHz49DdZxdgUR8wHwYDVR0j
BBgwFoAUSdutX+zNMyNRYjAKoFc4dul3EXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjYnUxRnRjTUNqSEJ1bzVoQ285RFBDYUhYZFgxV2NSMVhXelZwdW5S
VjMvMC80OURCQUQ1RkVDQ0QzMzIzNTE2MjMwMEFBMDU3Mzg3NkU5NzcxMTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5REJBRDVGRUNDRDMzMjM1
MTYyMzAwQUEwNTczODc2RTk3NzExNzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2J1MUZ0Y01DakhCdW81aENvOURQQ2FIWGRYMVdjUjFYV3pWcHVuUlYzLzAv
MzIzODMwMzQzYTM3NjEzMzMwM2EzYTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzNzMx
MzMzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcBKAR6MAAAMA0GCSqGSIb3DQEBCwUAA4IBAQDWVO0k
lHw1BjYTJazYCkuhDf9mTQpY9y1OZamkFzyMKFR0XbuNtEZXqBZEvSYS5WzwE8+9
qxKrhYzSMAzcHLGIwq1KTBx0/q/CERlpaCTcsWP6nWYGAFySXCssTFbpBvfELPpt
AxNoi1uKXU2Y5xAcPpFz1jB5eGyjN1AFBo87PLA9rXTG8HkJcQj+kQ6VvNVfbCZJ
U3oAgdcmyfXOqBkOh/3ukM2I1BftjHLjqJy7K1MVgc/wYOE/z90eqVIimckn9wB6
HqoJ3UBBp2JjesYRw4sqoLB0L8NzXMgxG9OuX0ZOE0m0Bc5qP8Sf899mEsMHFuM/
LloIPeCKwnJ2Kyql
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:45:36 2025 by rpki-client